cve.bz

Matching records, newest first, page 119

Filter
  1. 7.5CVE-2019-17232ExploitEPSS 4.2%

    Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows unauthenticated options import.

  2. 9.8CVE-2019-17240ExploitEPSS 41%

    bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers.

  3. 5.4CVE-2019-17225ExploitEPSS 1.9%

    Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue.

  4. 7.5CVE-2019-17199ExploitEPSS 10.0%

    www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of an unanchored regular expression, as demonstrated by the a.jpg\.. substring.

  5. 9.8CVE-2019-17132ExploitEPSS 12%

    vBulletin through 5.5.4 mishandles custom avatars.

  6. 8.8CVE-2019-11932ExploitEPSS 45%

    A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote atta…

  7. 7.5CVE-2019-16328ExploitEPSS 13%

    In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes code for an RPyC service with default configuration settings.

  8. 6.1CVE-2019-16931ExploitEPSS 3.3%

    A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard. This occurs because …

  9. 4.3CVE-2019-16116ExploitEPSS 3.7%

    EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash.

  10. 7.8CVE-2019-17080ExploitEPSS 8.2%

    mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports.

  11. 9.8CVE-2019-15039ExploitEPSS 13%

    An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed in TeamCity 2019.1.

  12. 10.0CVE-2019-16932ExploitEPSS 39%

    A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.

  13. 7.2CVE-2019-16997ExploitEPSS 48%

    In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter.

  14. 7.2CVE-2019-16996ExploitEPSS 12%

    In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_admin&a=dopara&app_type=shop id parameter.

  15. 9.8CVE-2019-16920KEVExploitEPSS >99.9%

    Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead …

  16. 7.5CVE-2019-16902ExploitEPSS 9.7%

    In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname.

  17. 6.1CVE-2019-12562ExploitEPSS 6.2%

    Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges suc…

  18. 8.8CVE-2019-16667ExploitEPSS 55%

    diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands. This occurs because csrf_callback() produces a "CSRF token expired" error and a Try Again button when a…

  19. 9.8CVE-2019-16894ExploitEPSS 3.0%

    download.php in inoERP 4.15 allows SQL injection through insecure deserialization.

  20. 6.1CVE-2019-10092ExploitEPSS 81%

    In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This …

  21. 7.5CVE-2015-9415ExploitEPSS 3.9%

    The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion.

  22. 6.1CVE-2015-9414ExploitEPSS 3.6%

    The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter.

  23. 6.1CVE-2019-10098ExploitEPSS 74%

    In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.

  24. 8.8CVE-2019-16701ExploitEPSS 20%

    pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.exec_php call containing shell metacharacters in a parameter value.

  25. 5.4CVE-2019-10405ExploitEPSS 65%

    Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerability to obtain the HTTP session cookie despite it being marked…

  26. 9.8CVE-2019-16759KEVExploitEPSS 99.7%

    vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.

  27. 9.8CVE-2019-16724ExploitEPSS 72%

    File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331.

  28. 9.4CVE-2019-16383ExploitEPSS 5.2%

    MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 before 11.1.1 allows an unauthenticated attacker to gain unauthorized access to the database. Depending on the database engine being u…

  29. 7.5CVE-2019-13063ExploitEPSS 27%

    Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page. This will result in file disclosure (i.e., being able to pull any file from the…

  30. 9.8CVE-2019-16702ExploitEPSS 11%

    Integard Pro 2.2.0.9026 allows remote attackers to execute arbitrary code via a buffer overflow involving a long NoJs parameter to the /LoginAdmin URI.

  31. 9.8CVE-2019-16693ExploitEPSS 4.3%

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used.

  32. 9.8CVE-2019-16692ExploitEPSS 10%

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used.

  33. 4.9CVE-2019-16679ExploitEPSS 7.0%

    Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.

  34. 7.5CVE-2015-9406ExploitEPSS 59%

    Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (dot dot) in the files parameter to css/css.php.

  35. 8.6CVE-2019-16645ExploitEPSS 8.2%

    An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker. This could potentially…

  36. 8.8CVE-2019-16531ExploitEPSS 2.5%

    LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php.

  37. 6.1CVE-2019-16525ExploitEPSS 5.5%

    An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly filtered in the checklist-icon.php file, and it is possible to inject JavaScript code.

  38. 8.8CVE-2019-15943ExploitEPSS 8.7%

    vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled d…

  39. 9.8CVE-2019-16399ExploitEPSS 7.1%

    Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to access the /admin/ directory without credentials. An attacker can easily enable SSH from /admin/system_advanced.php?lang=en…

  40. 5.4CVE-2016-10993ExploitEPSS 3.2%

    The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter.

  41. 6.1CVE-2016-10976ExploitEPSS 1.7%

    The safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS.

  42. 6.1CVE-2016-10973ExploitEPSS 2.0%

    The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php.

  43. 9.8CVE-2016-10972ExploitEPSS 11%

    The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.

  44. 6.1CVE-2019-16197ExploitEPSS 3.0%

    In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.

  45. 8.8CVE-2016-10960ExploitEPSS 8.7%

    The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter.

  46. 9.8CVE-2019-16057KEVExploitEPSS 86%

    The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

  47. 7.5CVE-2016-10956ExploitEPSS 11%

    The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.

  48. 6.1CVE-2019-16332ExploitEPSS 5.7%

    In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS.

  49. 7.5CVE-2019-16313ExploitEPSS 46%

    ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code.

  50. 7.8CVE-2019-16294ExploitEPSS 9.8%

    SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file.